Closed codingo closed 4 years ago
Consideration would need to be made when implementing this that if it is run with the -nW flag a warning should be raised that subdomains that no longer resolve will be excluded from results.
Hey @codingo! I think that is a really good idea! That would really add value and to the tool and make life a fair bit easier! Stating the source helps a tester inform where it was found and can allow further manual enumeration too.
Further to this, I think if something is found over multiple sources it should present as:
[BAIDU,ASK] testdomain2.yahoo.com (No longer active)
Hey, i don't believe this would be useful for general people. Also, it would require too much work to be implemented. Hence closing this issue now. Feel free to reopen it!
When working on an OSINT engagement I want to include subdomain information in supplemental data of my reporting. I believe subfinder could provide an output type to supplement this. I would see this as working similar to the following:
For example: